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Using This Manual 



This manual introduces you to the HP 64146A/B 7700 Series emulator 
as used with the PC Interface. 

This manual: 

■ Shows you how to use emulation commands by executing 
them on a sample program and describing their results. 

■ Shows you how to use the emulator in-circuit (connected to a 
target system). 

■ Shows you how to configure the emulator for your 
development needs. Topics include: restricting the emulator 
to real-time execution, selecting a target system clock source, 
and allowing the target system to insert wait states. 

This manual does not: 

■ Show you how to use every PC Interface command and 
option; the PC Interface is described in the HP 64700 
Emulators PC Interface: User's Reference. 

For the most part, the HP 64 146 A and HP 64146B emulators all 
operate the same way. Differences of between the emulators are 
described where they exist. Both the HP 64146A and HP 64146B 
emulators will be referred to as the "HP 64146A/B 7700 Series 
emulator" or "7700 Series emulator". In the specific instances where 
HP 64146B emulator differs from HP 64146A emulator, it will be 
described as "HP 64146B emulator". 



Organization 

Chapter 1 

Chapter 2 

Chapter 3 
Chapter 4 

Chapter 5 
Appendix A 



Introduction to the 7700 Series Emulator. This chapter lists the 
7700 Series emulator features and describes how they can help you in 
developing new hardware and software. 

Getting Started. This chapter shows you how to use emulation 
commands by executing them on a sample program. This chapter 
describes the sample program and how to: load programs into the 
emulator, map memory, display and modify memory, display registers, 
step through programs, run programs, set software breakpoints, search 
memory for data, and use the analyzer. 

"In-Circuit" Emulation. This chapter shows you how to plug the 
emulator into a target system, and how to use the "in-circuit" emulation 
features. 



Configuring the Emulator. You can configure the emulator to adapt 
it to your specific development needs. This chapter describes the 
options available when configuring the emulator and how to save and 
restore particular configurations. 

Using the Emulator. This chapter describes emulation topics which 
are not covered in the "Getting Started" chapter (for example, 
coordinated measurements and storing memory). 

File Format Readers. This chapter shows you what the "Reader" 
program accomplishes, and how to use it. 
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Introduction to the 7700 Series Emulator 



Introduction 



The topics in this chapter include: 

■ Purpose of the 7700 Series Emulator 

■ Features of the 7700 Series Emulator 



Purpose of the 
7700 Series 
Emulator 



Note 
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The HP 64146A/B 7700 Series Emulator is designed to replace the 
MELPS 7700 Series microprocessor in your target system so you can 
control operation of the processor in your application hardware 
(usually referred to as the target system). The emulator performs just 
like the MELPS 7700 Series microprocessor, but is a device that allows 
you to control the MELPS 7700 Series directly. These features allow 
you to easily debug software before any hardware is available, and ease 
the task of integrating hardware and software. 



In this manual, MELPS 7700 Series is referred to as 7700 Series. 
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Figure 1-1 . HP 64146 Emulator for MELPS 7700 Series 
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Supported A list of the supported 7700 Series microprocessors is shown in Table 
Microprocessors You need to purchase appropriate emulation pod and emulation 

processor. 



Processor Clock Emulation Emulation 

Processor Pod 

M37700/1 M2— xxxFP /SP I 8 | M37700SAFP | M37700T-HPD 

M2AxxxFP / SP I 16 | 

SFP/SP I 8 I | 
SAFP/SP I 16 I 
+ + 

M37700/1 M4 — xxxFP / SP I 8 | M37700S4AFP 

M4 AxxxFP / SP I 16 | 

S4FP/SP I 8 I I 

S4AFP/SP I 16 | 

+ + + 

M37702/3 M2-xxxFP/SP I 8 | M37702S1AFP | M37702T-HPD 

M2AxxxFP/SP I 16 | 

S1FP/SP I 8 I I 

S1AFP/SP I 16 | 

+ + + 

M37702/3 M4 — xxxFP / SP I 8 | M37702S4AFP 

M4 AxxxFP / SP I 16 | 

S4FP/SP I 8 I 

S4AFP/SP I 16 | 

+ + + 

M37702 M6LxxxFP | 8 | M37702S1BFP | M37702TL-HPD 

I | HP 641466-61002 

I | (64146B) 

+ + + 

M37702/3 M2BxxxFP/SP I 25 I M37702S1BFP | M37702TB-HPD 

S1BFP/SP I 25 I | HP 64146-61001 

+ + + (64146A) 

M37702/3 M4BxxxFP/SP I 25 I M37702S4BFP | HP 64146-61002 

S4BFP/SP I 25 I I (64146B) 

M6BxxxFP | 25 I 

+ + + 

M37704/5 M2-xxxFP/SP I 8 | M37704S1AFP | M37704T-HPD 

M2AxxxFP/SP I 16 | 

S1FP/SP I 8 I 

S1AFP/SP I 16 | 

+ + + 

M37704 M3BxxxFP | 25 I M37704M4BFP | M37704TB-HPD 

M3BxxxFP | 25 I 

+ + + 

M37710 M4BxxxFP | 25 | M37710M4BFP | M37710TL-HPD 

S4BFP | 25 I 

+ + + 

M37720 S1FP | 8 | M37720S1AFP | M37720T-HPD 

S1AFP | 16 I I 

+ + + 

M37730 S2FP/SP I 8 | M37730S2AFP | M37730T-HPD 

S2AFP/SP I 16 | 



Table 1-1. Supported Microprocessors 
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M37732 


S4FP/SP 
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-+ — 
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Table 1-1. Supported Microprocessors(Cont'd) 



The HP 64146A emulator is provided with the following items. 

■ HP 64146-61001 emulation pod with M37702S1BFP 
emulation processor 

■ Adaptor for M37703 processor 



The HP 64146B emulator is provided with the following items. 

■ HP 64146-61002 emulation pod with M37702S1BFP 
emulation processor 

■ Adaptor for M37703 processor 

As you can see from Table 1-1, the HP 64146A/B emulator can 
emulate M37702/3M2 and M37702/3S1 processor by default. These 
emulation pods can be used with clock up to 25 MHz. Also, HP 
64146B emulator can emulate M37702 M6L processor using default 
emulation pod, HP 64146-61002. 

To emulate other processors of 7700 Series, you need to purchase 
appropriate emulation pod and/or emulation processor. 

The HP 64146A/B #001 emulator is provided with no emulation pod. 
You need to purchase appropriate emulation pod and emulation 
processor listed in Table 1-1. 

To purchase emulation pod or emulation processor, contact the address 
listed in the manual provided with your emulation pod. 
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The list of supported microprocessors in Table 1-1 is not necessarily 
complete. To determine if your microprocessor is supported or not, 
contact Hewlett-Packard. 



Features of the This section introduces you to the features of the emulator. The 

YYOO Series chapters which follow show you how to use these features. 

Emulator 



ClOCk Speed The HP 64146-61001 and HP 64146-61002 emulation pods generate 

internal clock of 1 MHz. These emulation pods can be used with target 
system clock up to 25 MHz. 

The emulator can run with no wait state up to 25 MHz. When clock is 
faster than 16 MHz, you can use the emulator with one of the following 
methods. 

■ Insert one wait state by the RDY signal. The emulator can be 
configured to generate the RDY signal. Also, the emulator 
accepts RDY signal from the target system. 

■ Use the high speed access mode of the emulator. The 
emulator can run with no wait state. However, there is a 
limitation in the mapping of the emulation memory in this 
mode. Refer to Chapter 4 of this manual for more detail. 

The HP 64146A/B 7700 Series emulator is used with one of the 
following Emulation Memory Cards. 

■ HP 64726 A 1 28 K byte Emulation Memory C ard 

■ HP 64727 A 5 1 2K byte Emulation Memory C ard 

■ HP 64728 A 1M byte Emulation Memory Card 

■ HP 64729A 2M byte Emulation Memory Card 
The emulation memory can be configured into 256 byte blocks. A 
maximum of 16 ranges can be configured as emulation RAM (eram), 
emulation ROM (erom), target system RAM (tram), target system 
ROM (trom), or guarded memory (grd). The HP 64146A/B 7700 



Emulation memory 
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Series emulator will attempt to break to the emulation monitor upon 
accessing guarded memory; additionally, you can configure the 
emulator to break to the emulation monitor upon performing a write to 
ROM (which will stop a runaway program). 



Analysis The HP 64146A/B 7700 Series emulator is used with one of the 
following analyzers which allows you to trace code execution and 
processor activity. 

■ HP 64704 80-channel Emulation Bus Analyzer 

■ HP 64703 64-channel Emulation Bus Analyzer and 
16-channel State/Timing Analyzer 

■ HP 64794A/C/D 80-channel 8K/64K/256K Emulation Bus 
Analyzer 



The Emulation Bus Analyzer monitors the emulation processor using 
an internal analysis bus. The HP 64703 64-channel Emulation Bus 
Analyzer and 16-channel State/Timing Analyzer allows you to probe 
up to 16 different lines in your target system. 



Foreground or 
Background 
Emulation Monitor 



When you power up the emulator, or when you initialize it, the 
background monitor is used by default. You can also configure the 
emulator to use a foreground monitor. Before the background and 
foreground monitors are described, you should understand the function 
of the emulation monitor program. 



The Function of the Monitor Program 

The monitor program is the interface between the emulation system 
controller and the target system. The emulation system controller uses 
its own microprocessor to accept and execute emulation, system, and 
analysis commands. The monitor program is executed by the 
emulation processor. 

The monitor program makes possible emulation commands which 
access target system resources. (The only way to access target system 
resource is through the emulation processor.) For example, when you 
enter a command to modify target system memory, it is the execution 
of monitor program instructions that cause the new values to be written 
to target system memory. 



1-6 Introduction 



The Background Monitor 



Register Display and 
Modification 



Single-Step 



Breakpoints 



Real Time Operation 



On emulator power-up, or after initialization, the emulator uses the 
background monitor program. The background monitor does not 
occupy processor address space. 

The Foreground Monitor 

You can configure the emulator to use a foreground monitor program. 
When a foreground monitor is selected it executes in the foreground 
emulator mode. The foreground monitor occupies processor memory 
space and executes as if it were part of your program. 

You can display or modify the 7700 Series internal register contents. 
This includes the ability to modify the program counter (PC) and the 
program bank register (PG) values so you can control where the 
emulator starts a program run. 

When you are using the background monitor, you can direct the 
emulation processor to execute a single instruction or a specified 
number of instructions. 



You can set the emulator/analyzer interaction so the emulator will 
break to the monitor program when the analyzer finds a specific state 
or states, allowing you to perform post-mortem analysis of the program 
execution. You can also set software breakpoints in your program. 
This feature is realized by inserting BRK instructions into user 
program. Refer to the "Using Software Breakpoints" section of 
"Getting Started" chapter for more information. 

Real-time signifies continuous execution of your program at full rated 
processor speed without interference from the emulator. (Such 
interference occurs when the emulator needs to break to the monitor to 
perform an action you requested, such as displaying target system 
memory.) Emulator features performed in real time include: running 
and analyzer tracing. Emulator features not performed in real time 
include: display or modify of target system memory; load/dump of 
target memory, display or modification of registers, and single step. 
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Coverage Coverage memory is provided for the processor' s external program 
Measurements memory space. This memory allows you to perform coverage 
measurements on programs in emulation memory. 

Reset Support The emulator can be reset from the emulation system under your 
control; or your target system can reset the emulation processor. 

Watch Dog Timer You can configure the emulator to disable the watch dog timer. 
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Limitations, 
Restrictions 



AcceSS tO Internal Modifying internal RAM or SFR suspends user program execution. 

RAM 



Trace Internal RAM Read data from the internal RAM or SFR is not traced correctly by the 

emulation analyzer. 



Note 
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Write data is also not traced correctly, when the following conditions 
are met: 

■ The emulator is used with the M37795 emulation pod. 

■ The processor is operating in the memory expansion or 
microprocessor mode with 8 bit external bus. 



DMA Support Direct memory access to emulation memory is not allowed. 



Watch Dog Timer in 
Background 



Watch dog timer suspends count down while the emulator is running in 
background monitor. 



Step Command with 
Foreground Monitor 



Step command is not available when the emulator is used with a 
foreground monitor. 



Step Command and 
Interrupts 



When an interrupt occurs while the emulator is running in monitor, the 
emulator fails to do the first step operation. The emulator will display 
the mnemonic of the instruction which should be stepped, but the 
instruction is not actually executed. The second step operation will 
step the first instruction of the interrupt routine. 
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When the 7700 microprocessor is in the stop or wait mode, emulation 
commands which access memory or registers will fail. You need to 
break the emulator into the monitor to use these commands. Once you 
break the emulator into the monitor, the stop or wait mode will be 
released. 

Stack Address in some versions of 7700 microprocessor, the stack can be located in 
Bank FF. However, the HP 64146A/B 7700 Series emulator doesn't 
support the feature. The stack must be located in Bank 0. 



Emulation 
Commands in 
Stop/Wait Mode 
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Getting Started 

Introduction This chapter leads you through a basic, step by step tutorial that shows 

how to use the HP 64146A/B emulator with the PC Interface. 

This chapter will: 

■ Tell you what must be done before you can use the emulator 
as shown in the tutorial examples. 

■ Describe the sample program used for this chapter' s examples. 

■ Briefly describe how PC Interface commands are entered and 
how emulator status is displayed. 

This chapter will show you how to: 

■ Start up the PC Interface from the MS-DOS prompt. 

■ Define (map) emulation and target system memory. 

■ Load programs into emulation and target system memory. 

■ Enter emulation commands to view execution of the sample 
program. 
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Before You Begin 



Prerequisites Before beginning the tutorial presented in this chapter, you must have 
completed the following tasks: 

1. Connected the emulator to your computer. The HP 64700 
Series Installation/Service manual shows you how to do this. 

2. Installed the PC Interface software on your computer. 
Software installation instructions are shipped with the media 
containing the PC Interface software. The HP 64700 
Emulators PC Interface: User's Reference manual contains 
additional information on the installation and setup of the PC 
Interface. 

3. In addition, it is recommended, although not required, that you 
read and understand the concepts of emulation presented in 
the Concepts of Emulation and Analysis manual. The 
Installation/Service also covers HP 64700 Series system 
architecture. A brief understanding of these concepts may 
help avoid questions later. 

Connected the emulation pod to the emulator as shown on 
Figure 2-1. 



Caution 




Turn off power of the emulator before inserting the cables into the 
emulation pod. 



You should read the HP 64700 Emulators PC Interface: 
User's Reference manual to learn how to use the PC Interface 
in general. For the most part, this manual contains 
information specific to the 7700 Series emulator. 
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A Look at the Sample The sample program used in this chapter is listed in Figure 2-2. The 
Program program is a primitive command interpreter. 

Using the various features of the emulator, we will show you how to 
load this program into emulation memory, execute it, monitor the 
program's operation with the analyzer, and simulate entry of different 
commands by using the "Memory Modify" emulation command. 

Data Declarations 

The "TABLE" section defines the messages used by the program to 
respond to various command inputs. These messages are labeled 
Msg_A, Msg_B, and Msg_I. 
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.DP 

.DT 

. PUB 

.PUB 

.PUB 

.PUB 



0 
0 

Init 
Msgs 

Cmd_Input 
Msg_Dest 



. SECTION BUFFER 

; Command input byte. 

Cmd_Input: . BLKB 1 

i 

; Destination of the command messages. 
. ******** 

Msg_Dest : 
Stack : 

. SECTION 



.********************************************************** 



.BLKB 
.BLKB 



20H 
100H 



Msgs : 
Msg_A 
Msg_B 
Msg_I 



.BYTE 
.BYTE 
.BYTE 

. SECTION 
.DATA 
. INDEX 



Set up the Stack Pointer. 



TABLE 

'THIS IS MESSAGE A' 
'THIS IS MESSAGE B' 
'INVALID COMMAND' 

SAMPPROG 
8 

16 

#Stack 



Init: LDX 

TXS 
SEM 

i 

; Clear Previous command. 



Clear_Input : 



LDA 
STA 



B, #00H 

B, DT : Cmd_Input 



; Read command input byte. If no command has been entered, 
; continue to scan for it. 



Scan : 



LDA 
CMP 
BEQ 



A, DT : Cmd_Input 
A,#00H 

Scan 



. INDEX 



; A command has been entered. The destination area is 
; cleared. 



SEP 

Clear_Output : LDX 
LDY 



X 

#00H 
#20H 



Figure 2-2. Sample Program Listing 



2-4 Getting Started 



Clear_Loop: STA B, DT : Msg_Dest , X 

INX 
DEY 

BNE Clear_Loop 
. INDEX 16 

; Check if the command entered is command A, command B, 
; or invalid command. 

CLP X 

Process_Cmd: CMP A, #41H 

BEQ Cmd_A 

CMP A, #42H 

BEQ Cmd_B 

BRA Cmd_I 
.it********************************************************* 

T 

; Command A is entered. A = the number of bytes in 

; message A. X = location of the message. Jump to the 

; routine which writes the message. 

. ********************************************************** 
Cmd_A: LDA A, #11H 

LDX #Msg_A 

BRA Output 

; Command B is entered. 

.********************************************************** 
Cmd_B: LDA A, #11H 

LDX #Msg_B 

BRA Output 

i 

; An invalid command is entered. 

.********************************************************** 
Cmd_I: LDA A, #0FH 

LDX #Msg_I 

; Message is written to the destination. Y = location of 
; the destination area. 

.********************************************************** 
Output: LDY #Msg_Dest 

MVN 0 , 0 

.********************************************************** 
i 

; Go back and scan for next command. 
t 

BRA Clear_Input 
. END 




Figure 2-2. Sample Program Listing (Cont'd) 



Getting Started 2-5 



Initialization 



The program instruction at the Init label initializes the stack pointer. 
Reading Input 

The instruction at the Clearjnput label clears any random data or 
previous commands from the Cmdjnput byte. The Scan loop 
continually reads the Cmdjnput byte to see if a command is entered 
(a value other than 0 hex). 

Processing Commands 

When a command is entered, the Clear_Output routine clears the 
destination area. Then, the instructions from Process_Cmd to Cmd_A 
determine whether the command was "A", "B", or an invalid command. 

If the command input byte is "A" (ASCII 41 hex), execution is 
transferred to the instructions at Cmd_A. 

If the command input byte is "B" (ASCII 42 hex), execution is 
transferred to the instructions at Cmd_B. 

If the command input byte is neither "A" nor "B", an invalid command 
has been entered, and execution is transferred to the instructions at 
Cmd_I. 

The instructions at Cmd_A, Cmd_B, and Cmd_I each load register 
Accumulator A with the length of the message to be displayed and 
register index register X with the starting location of the appropriate 
message. Then, execution transfers to Output which writes the 
appropriate message to the destination location, Msg_Dest. 

After the message is written, the program branches back to read the 
next command. 

The Destination Area 

The "BUFFER" section declares memory storage for the command 
input byte, the destination area, and the stack area. 
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Sample Program 
Assembly 



The sample program is written for and assembled/linked with 
Mitsubishi RASM77 Assembler and LINK77 Linkage Editor. 



The sample program was assembled with the following command: 
C>rasm77 -s cmd_rds.a77 <RETURN> 

The sample program can be linked with following command and 
generates the absolute file. The contents of "cmd_rds.lnk" linkage 
editor subcommand file is shown in Figure 2-3. 

C>link77 @cmd_rds . Ink <RETURN> 

cmd_rds 

, SAMPPROG=C000 TABLE=C100 BUFFER=100 
, -s -ms 

Figure 2-3. Linkage Editor Command File 



To load a program into the emulator, both .hex and .sym file are 
needed. To generate .sym file, you need to specify -s option when 
assmble and link your program. 



Linking the Sample 
Program 




Getting Started 2-7 



Starting Up the PC 
Interface 



If you have set up the emulator device table and the HPTABLES shell 
environment variable as shown in the HP 64700 Emulators PC 
Interface: Reference, you can start up the 7700 Series PC Interface by 
entering the following command from the MS-DOS prompt: 

pcm377b <emulname> 
where <emulname> is emul_coml if your emulator is connected to the 
COM1 port or emul_com2 if it is connected to the COM2 port. If you 
edited the \hp64700\tables\64700tab file to change the emulator name, 
substitute the appropriate name for <emulname> in the above 
command. 

In the command above, pcm377b is the command to start the PC 
Interface; "<emulname>" is the logical emulator name given in the 
emulator device table. (To start the version of the PC Interface that 
supports external timing analysis, substitute ptm377b for pcm377b in 
this command.) If this command is successful, you will see the display 
shown in Figure 2-4. Otherwise, you will be given an error message 
and returned to the MS-DOS prompt. 



=Code= 



-Emu lation- 



=Analysis= 





STATUS: 


M37780 — Etiulation reset 


Etiulation trace halted 


Uindoul 


SysteM Register* Processor 


Breakpoints MeMory Config Analysis 


Active 


Delete Erase Load Open 


Store Utility Zoom 



Figure 2-4. PC Interface Display 
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Selecting PC 
Interface Commands 



This manual will tell you to "select" commands. You can select 
commands or command options by either using the left and right arrow 
keys to highlight the option and press the Enter key, or you can simply 
type the first letter of that option. If you select the wrong option, you 
can press the ESC key to move back up the command tree. 

When a command or command option is highlighted, a short message 
describing that option is shown on the bottom line of the display. 



Emulator Status 



The status of the emulator is shown on the line above the command 
options. The PC Interface periodically checks the status of the 
emulator and updates the status line. 



Modifying 
Configuration 

Selecting Processor 
Type 



The 7700 Series emulator can emulate various microprocessors of 7700 
Series. Before starting emulation, you need to tell the emulator the 
name of microprocessor you are going to emulate. To do this, you 
must modify the pod configuration. Select: 

Config, General 
Use the arrow keys to move the cursor to the "Processor type?" field. 
Use the TAB key to select the processor type you are going to emulate. 
A list of valid processor types and corresponding processor names are 
listed in Table 2- 1 . 

When your processor is not listed in Table 2-1, refer to chapter 4 of this 
manual for information on configuring the emulator. 



Defining the Reset 
Value for Stack 
Pointer 



Even though the 7700 Series emulator has a background monitor, it 
requires that you define a stack pointer. If no stack is defined, the 
background monitor has no place to store run address and other 
information required to respond to commands. 
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<chip_name> 




Processor 


<chip_name> 




Processor 


7 7 D flM9 


1 
1 
1 
1 

1 

1 
1 


l v lo / /UU11Z — XXXr r 

M2AxxxFP | 
M37701M2-xxxSP 

M2AxxxSP I 


7704M2 


1 
1 
1 
1 

1 

1 
1 

-- + - 


M37704M2-xxxFP 

HinAAAl r 

M37705M2-xxxSP 

FlZfiXXXor 


1 7 0 OMd 


-- + - 

1 
1 

1 


llO / / U Ul 14 aaaI n 

M4AxxxFP | 
M37701M4-xxxSP 

M4AxxxSP I 


7 7 0 4M^ 


1 
1 


M3 7 7 0 4M3BxxxFP 




1 

1 


7704M4 


— +- 


M37704M4BxxxFP 




1 


7704S1 




M37704S1FP 
SIAFP 

1 1 o / / u u o r o r 

SIASP 


7700S 


— + - 

1 


M37700SFP 
SAFP 

1 1 0 I I U X D D t: 

SASP 


1 

1 
1 
1 
1 






7 7 1 OMd 


"- + - 

1 


1*1 O 1 1 lUrlTDAAAr XT 


7700S4 


_|_- 


M37700S4FP 
S4AFP 

M37701S4SP 
S4ASP 


1 


1 


7710S4 


-- + - 

1 


M37710S4BFP 




1 


7720S1 


1 

1 


M37720S1FP 
SIAFP 


7702M2 


1 


M37702M2-xxxFP 

M2AxxxFP | 

lliDAXM r 

M37703M2-xxxSP 

M2AxxxSP I 
M2BxxxSP I 




1 


1 

1 

1 
1 
1 

1 

1 


7730S2 
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1 

1 
1 
1 
1 


M37730S2FP 
S2AFP 

COCD 

S2ASP 




1 


7 7 3 2 S 4 


-- + - 

1 


S4AFP 


7702M4 


1 


M37702M4-xxxFP 

M4AxxxFP | 

KIdXXXi Jr 

M37703M4-xxxSP 

M4AxxxSP I 
M4BxxxSP I 


1 

1 

— + - 




1 

1 
1 


7 7 a n c 


i 
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M37780STJ 
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1 


7781M4 


1 


M37781M4TxxxJ 
M4TxxxFP 


7702M6 
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M3 7 7 0 2M6BxxxFP 

M6LxxxFP | 
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1 
1 


7781E4 


1 


M37781E4TxxxJ 
E4TxxxFP 


7702S1 


— + - 


M37702S1FP 
SIAFP 
SIBFP 

M37703S1SP 
SIASP 
SIBSP 




1 

— + - 


1 
1 


7795S 


1 
1 

— + - 


M37795SJ 
STJ 




1 
1 
1 

— + - 


7796E4 


1 
1 


M37796E4-xxxJ 
E4TxxxJ 
E4TxxxFP 


7702S4 




M37702S4FP 
S4AFP 
S4BFP 

M37703S4SP 
S4ASP 
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1 

1 
1 
1 
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Table 2-1 . Processor Name for Emulator Configuration 
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Use the arrow keys to move the cursor to the "Reset value for Stack 
Pointer" field, type "27f ', and press Enter. 

The stack pointer value will be set to the stack pointer (SP) on entrance 
to the emulation monitor initiated RESET state (the "Emulation reset" 
status). To save the configuration, use the Enter key to exit the field in 
the last field. (The End key on Vectra keyboards moves the cursor 
directly to the last field.) 



Mapping Memory The 7700 Series emulator contains 128K/512K/1M/2M bytes of 

high-speed emulation memory (no wait states required) that can be 
mapped at a resolution of 256 bytes. 

The memory mapper allows you to characterize memory locations. It 
allows you specify whether a certain range of memory is present in the 
target system or whether you will be using emulation memory for that 
address range. You can also specify whether the target system memory 
is ROM or RAM, and you can specify that emulation memory be 
treated as ROM or RAM. 

Blocks of memory can also be characterized as guarded memory. 
Guarded memory accesses will generate "break to monitor" requests. 
Writes to ROM will generate "break to monitor" requests if the "Breaks 
on ROM writes?" configuration item is enabled (see the "Configuring 
the Emulator" chapter). 

The memory mapper allows you to define up to 16 different map terms. 



Caution 




When you use the 7700 Series internal ROM, you must map memory 
space where internal ROM is located as emulation ROM. 



You don't have to map internal RAM as emulation RAM, since the 
emulator uses internal RAM of the emulation processor. 
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Typically, assemblers generate relocatable files and linkers combine 
relocatable files to form the absolute file. The linker load map listing 
will show what locations your program will occupy in memory. A part 
of linker load map listing for the sample program (cmd_rds.map) is 
shown in Figure 2-5. 



MELPS 7700 


LINKER V. 2 . 00 . 00H 


MAP FILE 




Thu May 


17 10:35: 


:50 1990 


SECTION 


FILENAME 


ATR. 


TYPE 


START 


LENGTH 


ALIGNMENT 


BUFFER 

SAMPPROG 

TABLE 


cmd_rds . r77 
cmd_rds . r77 
cmd_rds . r77 


REL 
REL 
REL 


RAM 
ROM 
ROM 


000100 

oocooo 

OOClOO 


000121 
000048 
000031 




GLOBAL LABEL INFORMATION 












Cmd_Input 
Msgs 


000100 Init 
OOClOO 




OOCOOO 


Msg_Dest 


000101 



GLOBAL SYMBOL INFORMATION 



TOTAL ROM SIZE 121 (79H) BYTES 
TOTAL RAM SIZE 289 (121H) BYTES 

Figure 2-5. Sample Program Load Map Listing 

From the load map listing, you can see that the sample program 
occupies locations in three address ranges. The code area, which 
contains the opcodes and operands which make up the sample program, 
occupies locations C000 hex through C047 hex. The data area, which 
contains the ASCII values of the messages the program displays, is 
occupies locations CI 00 hex through CI 32 hex. The destination area, 
which contains the command input byte and the locations of the 
message destination and the stack, occupies locations 100 hex through 
221 hex. 

To map memory for the sample program, select: 
Config, Map, Modify 

Using the arrow keys, move the cursor to the "address range" field of 
term 1. Enter: 

OcOOO . . Offff 



Which Memory 
Locations Should Be 
Mapped? 
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Move the cursor to the "memory type" field of term 1, and press the 
TAB key to select the erom (emulation ROM) type. 



Note ||gl When you are going to emulate a processor which have no internal 

RAM, you need to map 100 hex through fff hex as emulation RAM for 
this tutorial. 



To save your memory map, use the Enter key to exit the field in the 
lower right corner. (The End key on Vectra keyboards moves the 
cursor directly to the last field.) The memory configuration display is 
shown in Figure 2-6. 



— Menory Map Configuration — 
Unnapped MeMory type 
Address Range 




MeMory Type 



<-ti-> : InterField Mouenent Ctrl «--» : Field editing TAB :Scroll choices 



STATUS: M37700— Eiiulation reset 



EMulation trace halted 



Use the TAB and Shift-TAB keys to pick MeMory type For unMapped ranges. 



Figure 2-6. Memory Configuration Display 
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When mapping memory for your target system programs, you may 
wish to characterize emulation memory locations containing programs 
and constants (locations which should not be written to) as ROM. This 
will prevent programs and constants from being written over 
accidentally, and will cause breaks when instructions attempt to do so. 



Note 




The memory mapper re-assigns blocks of emulation memory after the 
insertion or deletion of mapper terms. 



Loading Programs If you have already assembled and linked the sample program, you can 

into Msmory ^ oac * * e a ^ so ^ ute ^ e fry se i ectm g : 

Memory, Load 

File Format Use Tab and Shift-Tab key to select the format of your absolute file. 

The emulator accepts absolute files in the following formats: 

■ MELPS 7700 Hex format. 

■ HP-MRI IEEE 695 absolute. 

■ HP64000 absolute. 

■ Raw HP64000 absoulte 

■ Intel hexadecimal. 

■ Tektronix hexadecimal. 

■ Motorola S-records. 

For this tutorial, choose the MELPS 7700 Hex format. 



Memory Type The second field allows you to selectively load the portions of the 
absolute file which reside in emulation memory, target system 
memory, or both. 

Since emulation memory is mapped for sample program locations, you 
can enter either "emulation" or "both". 
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Force Absolute File This option is available for MELPS 7700 Hex, HP-MRI IEEE 695, and 
Read HP64000 formats. It forces the file format readers to regenarate the 
emulator absolute file (.hpa) and symbol data base (.hps) before 
loading the code. Normally, these files are only regenarated whenever 
the file you specify (the output of your language tools) is newer than 
the emulator absolute file and symbol data base. 

For more information, refer to the "Using the HP 64146 Format 
Reader" section in Appendix A. 



Absolute File Name For most formats, you enter the name of your absolute file in the last 

field. Type cmd_rds.hex, and press Enter to start the memory load. 



Using Symbols 



The following pages show you how to display global and local symbols 
for the sample program. For more information on symbol display, 
refer to the PC Interface Refernce. 



Displaying Global 
Symbols 



When you load MELPS 7700 Hex, HP-MRI IEEE 695, or HP64000 
format absolute files into the emulator, the corresponding symbol 
database is also loaded. 

The symbols database can also be loaded with the "System Symbols 
Global Load" command. This command is provided for situations 
where multiple absolute files are loaded into the emulator; it allows 
you to load the various sets of global symbols corresponding to the 
various absolute files. When global symbols are loaded into the 
emulator, information about previous global symbols is lost (that is, 
only one set of global symbols can be loaded at a time). 

After global symbols are loaded, both global and local symbols can be 
used when entering expressions. Global symbols are entered as they 
appear in the source file or in the global symbols display. 

To display global symbols, select: 

System, Symbols, Global, Display 
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The symbols window automatically becomes the active window as a 
result of this command. You can press <CTRL>z to zoom the 
window. The resulting display follows. 



a Syribols B 



Modules 



CMD_RDS 
Address 



0000100 
000C000 
0000101 

000C100 



SyMbol 

Cnd_I input 
Init 

Msg_Dest 
Msgs 



STATUS: 


M37788- 


-EMulation reset 


EMulation trace halted 


Uindou 


|SysteM| 


Register Processor 


Breakpoints Menory Config Analysis 



CoMMand_File Uait MS-DOS Log TerMinal SyMbols Exit 



The global symbols display has two parts. The first parts lists all the 
modules that were linked to produce this object file. These module 
names are used by you when you want to refer to a local symbol, and 
are case-sensitive. THe second part of the display lists all global 
symbols in this module. These names can be used in measurement 
specifications, and are case-snesitive. For example, if you wish to 
make a measurement using the symbol Cmdjnput, you must specify 
Cmdjnput. The strings cmdjnput or CMDJNPUT are not valid 
symbol names here. 

Displaying Local To display local symbols, select: 

Symbols 

System, Symbols, Local, Display 

Enter the name of the module you want to specify (from the first part of 
the global symbols display; in this case, CMD JiDS) and press Enter. 
The resulting display follows. 
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|SyMbolS| 



Add.FEss 


Sy Mbo 1 


000C005 


Clear_ Input 


000C019 


Clear_Loop 


000C015 


Clear Output 


000C02D 


Cnd ft 


000C034 


Cnd_B 


000C03B 


Cnd I 


000C100 


Msg ft 


000C111 


Msg_B 


000C122 


Msg_I 


000C040 


Output 


000C023 


Pifocess_CMd 


000C00C 


Scan 


0008221 


Stack 



STATUS: 


M37788- 


-EMulation reset 


EMulation trace halted 


•lindou 


ISystEMl 


Register Processor 


Breakpoints Menory Config Analysis 



CoMMand_File Uait MS-DOS Log TerMinal SyMbols Exit 

After you display local symbols with the "System Symbols Local 
Display" command, you can enter local symbols as they appear in the 
source file or local symbol display. When you display local symbols 
for a given module, that module becomes the default local symbol 
module. 

If you have not displayed local symbols, you can still enter a local 
symbol by including the name of the module: 

module_name : symbol 

Remember that the only valid module names are those listed in the first 
part of the global symbols display, and are case-sensitive for 
compatibility with other systems (such as HP-UX). 

When you include the name of an source file with a local symbol, that 
module becomes the default local symbol module, as with the "System 
Symbols Local Display" command. 

Local symbols must be from assembly modules that form the absolute 
whose symbol database is currently loaded. Otherwise, no symbols will 
be found (even if the named assembler symbol file exists and contains 
information). 
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One thing to note: It is possible for a symbol to be local in one module 
and global in another, which may result in some confusion. For 
example, suppose symbol "XYZ" is a global in module A and a local 
in module B and that these modules link to form the absolute file. After 
you load the absolute file (and the corresponding symbol database), 
entering "XYZ" in an expression refers to the symbol from module A. 
Then, if you display local symbols from module B, entering "XYZ" in 
an expression refers to the symbol from module B, not the global 
symbol. Now, if you again want to enter "XYZ" to refer to the global 
symbol from module A, you must display the local symbols from 
module A (since the global symbol is also local to that module). 
Loading local symbols from a third module, if it was linked with 
modules A and B and did not contain an'XYZ" local symbol, would 
also cause "XYZ" to refer to the global symbol from module A. 

Transfer Symbols to You can use the emulator's symbol-handling capability to improve 

the Emulator measurement displays. You do this by transferring the symbol database 
information to the emulator. To transfer the global symbol information 
to the emulator, use the command: 

System Symbols Global Transfer 

Transfer the local symbol information for all modules by entering: 

System Symbols Local Transfer All 

You can find more information on emulator symbol handling 
commands in the Emulator PC Interface Reference. 
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Displaying 
Memory in 
Mnemonic Format 



Once you have loaded a program into the emulator, you can verify that 
the program has indeed been loaded by displaying memory in 
mnemonic format. To do this, select: 



Memory, Display, Mnemonic 

Now, you need to specify the values of M flag and X flag. Use the 
TAB key and select "mOxO". Move the cursor to the "address range" 
field, and enter the address range "0c000..0c019". (You could also 
specify this address range using symbols, for example, 
"Init..CMD_RDS:Clear_Loop" or "Init..Init+19" ) The emulation 
window automatically becomes the active window as a result of this 
command. You can press <CTRL>z to zoom the memory window. 
The resulting display follows. 



.Emu 1 at ion- 



Address 



000C000 
000C003 
000C004 
000C005 
000C008 

000C00C 

000C00F 
000C011 
000C013 
000C015 
000C017 
000C019 



SyMbol 



Init 

RDS:Clear_Input 
CMD_RDS: Scan 

DS:Clear_Output 
_RDS:Clear_Loop 



Mnenonic 



LDX S0ZZ1H 

TXS 

SEM 

LDA B,800H 
STA B,DT:0100H 
LDfl A, DT: 0100H 
CMP A,tt00H 
BEQ CMD_RDS:Scan 
SEP B10H 
LDX B00H 
LDV 8Z0H 

STfl B,DT:0101H,X 



STATUS: 


M37700- 


-EMulation reset 


Etiulation trace halted 


klindou 


SysteM 


Register Processor 


Breakpoints fjjvgjjg] Conflg Analysis 



Display Modify Load Store Copy Find Report 



Getting Started 2-19 



Notice that you need to specify the values of M flag and X flag. This is 
needed because the length of operands is variable according to M flag 
and X flag. The values of M flag and X flag you specified are used 
when the inverse-assembler start disassembling. Every time the 
inverse-assembler encounters an instruction which changes M flag 
and/or X flag (SEM, CLM, SEP X, etc.), the value set by the 
instruction is used to disassemble memory contents. 

You can specify "continue" option to direct the emulator to use the 
current setting of M flag and X flag. 



Stepping Through The emulator allows you to execute one instruction or a number of 
the PrOQ ram instructions with step command. To begin stepping through the sample 

^ program, select: 

Processor, Step, Address 



Enter a step count of 1 , enter the symbol Init (defined as a global in the 
source file), and press Enter to step from program's first address, C000 
hex. The executed instruction, the program counter address, and the 
resulting register contents are displayed as shown in the following 
listing. 
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.Eriulat ion. 



BBBcBBB 
000C0B3 
000C004 
000C005 
000C008 

000C00C 

000C00F 
000C011 
000C013 
000C015 
000C017 
000C019 



Init 

RDS:Clear_Input 
CMD_RDS: Scan 

DS:Clear_Outputt 
_RDS:Clear_Loop 



LDX ttBZZlH 

TXS 

SEM 

LDA B, B00H 
STA B, DT: B1BBH 
LDA A, DT: B16BH 
CUP ft, 800H 
BEO CMD_RDS:Scati 
SEP ttlBH 
LDX B00H 
LDV 82BH 

STA Bj DT: 0101H, X 



BBBcBBB Init 

PC = 000C003 

pc = C0B3 pg = 00 

a = 0000 b = 0000 



dt 
x 



LDX 80ZZ1H 

= BB sp = BZZ1 ps = BBZ4 <. 
= BZZ1 y = 0000 dpr = 0000 



.m. . i. .> 



STATUS: 


M37700- 


-Running in Monitor 


Etiulation trace halted 


Jindou 


SysteM 


Register* jtftflglaltaffi 


Breakpoints Menory Config Analysis 



Go Break Reset CMB Step 



Note You cannot display registers if the processor is reset. Use the 

"Processor Break" command to cause the emulator to start executing in 
the monitor. 

You can display registers while the emulator is executing a user 
program (if execution is not restricted to real-time); emulator execution 
will temporarily break to the monitor. 



To continue stepping through the program, you can select: 

Processor, Step, Pc 
After selecting the command above, you have to opportunity to change 
the previous step count. If you wish to step the same number of times, 
you can press Enter to start the step. 

To repeat the previous command, you can press <CTRL>r. 
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Specifying a Step If you wish to continue to step a number of times from the current 
Count program counter, select: 

Processor, Step, Pc 
The previous step count is displayed in the "number of instructions" 
field. You can enter a number from 1 through 99 to specify the number 
of times to step. Type 5 into the field, and press Enter. The resulting 
display follows. 

a = 8088 b = 8888 x = BZZ1 y = 8888 dpr = 8888 



880C084 - SEh 
PC = BB8c8B5 

pc = cB05 pg =88 dt = B0 sp = 0ZZ1 ps = 88Z4 <..M..i..> 

a = 8888 b = 8888 x = 0ZZ1 y = 8888 dpr = 8888 



800c885 RDS:Clear_Input 
B80C888 - 

0B0C0BC Cf1D_RDS:Scan 
080C88F - 
BBBcBll - 
PC = 8B0c8Bc 

pc = cBBc pg = 88 dt 
a = 0888 b = 8880 x 



LDfi B,tt88H 
STA B, DT: 8188H 
LDA A, DT: B188H 
CMP A, ttBBH 
BEQ CMD_RDS:Scan 



88 

0ZZ1 



sp 

y 



= 0ZZ1 
= 8800 



PS 

dpr 



08Z7 
8000 



<. . m. . izc> 



STATUS: 


M37708- 


-Running in Monitor 


EMulation trace halted 


Uindou 


SysteM 


Register ^SSSS 


Breakpoints Menory Config Analysis 



Go Break Reset CMB Step 



When you specify step counts greater than 1 , only the last register 
contents are displayed. 



Note When the emulator performs step execution, all memory access is 

performed by byte access. 
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Modifying Memory 



PC = B08cBB5 

pc = c805 pg = 08 dt 
= 8888 b = 8888 x 



The preceding step commands show the sample program is executing 
in the Scan loop, where it continually reads the command input byte to 
check if a command has been entered. To simulate the entry of a 
sample program command, you can modify the command input byte by 
selecting: 

Memory, Modify, Bytes 
Now enter the address of the memory location to be modified, an equal 
sign, and new value of that location, for example, "Cmd_Input=41". 
(The Cmdjnput label was defined as a global symbol in the source 
file.) 

To verify that 41 hex was indeed written to Cmdjnput (100 hex), 
select: 

Memory, Display, Bytes 
Type the address "100" or the symbol Cmdjnput, and press Enter. 
This command will automatically activate the memory window. The 
resulting display is shown below. 



00 sp = 0221 ps - OKI 
0221 y = 0088 dpr = 0000 



0024 <. .M..i..> 



000C00B RDS:Clear_Input 
000C008 - 

B00c00c CMD_RDS:Scan 
BBBcBBf - 
BBBcBll - 
PC = BBBcBBc 

pc = c08c pg = 88 dt 
= 8888 b = 8880 x 



LDA 
STA 
LDA 
CMP 
BEO 



B, S00H 
B,DT:010BH 
A, DT: 8188H 
A, 888H 

CUD RDS:Scan 



88 

8221 



sp = 8221 
y = 8888 



PS 

dpr 



8827 
8088 



Address 
8888188 



Data (hex) 



41 



<. .M. .izc> 



Ascii 
A 



STATUS: 


M37788- 


-Running in Monitor 


EMulation trace halted 


Jindou 


SysteM 


Register Processor 


Breakpoints [jtikSfc] ConFig Analysis 



Display Modify Load Store Copy Find Report 



You can continue to step through the program as shown earlier in this 
chapter to view the instructions which are executed when an "A" (41 
hex) command is entered. 
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Running the 
Program 



To start the emulator executing the sample program, select: 



Processor, Go, Pc 
The status line will show that the emulator is "Running user program". 



Searching 
Memory for Data 



You can search the message destination locations to verify that the 
sample program writes the appropriate messages for the allowed 
commands. The command "A" (41 hex) was entered above, so the 
"Command A entered" message should have been written to the 
Msg_Dest locations. Because you must search for hexadecimal values, 
you will want to search for a sequence of characters which uniquely 
identify the message, for example, " A" or 20 hex, and 41 hex. To 
search the destination memory location for this sequence of characters, 
select: 

Memory, Find 
Enter the range of the memory locations to be searched, 101 hex 
through 121 hex, and enter the data 20 hex, and 41 hex. The resulting 
information in the memory window shows you that the message was 
indeed written as it was supposed to have been. 

To verify that the sample program works for the other allowed 
commands, you can modify the command input byte to "B" and search 
for " B" (20 hex, and 42 hex), or you can modify the command input 
byte to "C" and search for "d C" (64 hex, 20 hex, and 43 hex). 
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Br6aking intO th6 To break emulator execution from the sample program to the monitor 

Monitor program, select: 



Processor, Break 
The status line shows that the emulator is "Running in monitor". 

While the break will occur as soon as possible, the actual stopping 
point may be many cycles after the break request (dependent on the 
type of instruction being executed and whether the processor is in a 
hold state). 



Using Software 
Breakpoints 



Software breakpoints are implemented in the 7700 Series emulator by 
replacing opcodes with BRK instruction as software breakpoint 
instruction. When you set a software breakpoint, the emulator replaces 
the opcode at the address specified with a BRK instruction. When the 
emulator executes this instruction in the user program, execution 
breaks to the monitor. 

If the BRK instruction was not inserted as the result of a "Breakpoints" 
command (in other words, it is part of the user program), the 
"Undefined software breakpoint" message is displayed above the status 
line. Up to 32 software breakpoints may be defined. 



Note 



4 



You must set software breakpoints only at memory locations which 
contain instruction opcodes (not operands or data). If a software 
breakpoint is set at a memory location which is not an instruction 
opcode, the software breakpoint instruction will never be executed and 
the break will never occur. 



Getting Started 2-25 



Note Because software breakpoints are implemented by replacing opcodes 

with BRK instruction, you cannot define software breakpoints in target 
ROM. You can, however, use the Terminal Interface cim command to 
copy target ROM into emulation memory (see the Terminal Interface: 
Reference manual for information on the cim command). 



Note Software breakpoints should not be set, cleared, enabled, or disabled 

while the emulator is running user code. If any of these commands are 
entered while the emulator is running user code, and the emulator is 
executing code in the area where the breakpoint is being modified, 
program execution may be unreliable. 



Defining a Software To define a breakpoint at the address of the Cmd_I label of the sample 
Breakpoint program (C03B hex), select: 

Breakpoints, Add 
Enter the local symbol "Cmd_I". After the breakpoint is added, the 
breakpoint window becomes active and shows that the breakpoint is set. 

You can add multiple breakpoints in a single command by separating 
each one with a semicolon. For example, you could type 
"Cmd_A;Cmd_B" to set three breakpoints. 

Run the program by selecting: 

Processor, Go, Pc 
The status line shows that the emulator is running the user program. 
Modify the command input byte to an invalid command by selecting: 

Memory, Modify, Bytes 
Enter an invalid command, such as "Cmd_Input=75h". The following 
messages result: 
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Displaying Software 
Breakpoints 



Setting a Software 
Breakpoint 



Clearing a Software 
Breakpoint 



ALERT: Software breakpoint: 000c03b 
STATUS: M37700 — Running in monitor 
To continue program execution, select: 

Processor, Go, Pc 
To view the status of the breakpoint, select: 



Breakpoints, Display 
The resulting display shows that the breakpoint has been cleared. 

When a breakpoint is hit, it becomes disabled. To re-enable the 
software breakpoint, you can select: 

Breakpoints, Set, Single 
The address of the breakpoint you just added is still in the address 
field; to set this breakpoint again, press Enter. As with the 
"Breakpoints Add"command, the breakpoint window becomes active 
and shows that the breakpoint is set. 

If you wish to clear a software breakpoint that does not get hit during 
program execution, you can select: 

Breakpoints, Clear, Single 
The address of the breakpoint set in the previous section is still in the 
address field; to clear this breakpoint again, press Enter. 
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UsinCJ th© AnSlyZOT The 7700 Series emulation analyzer has 48 trace signals which monitor 

internal emulation lines (address, data, and status lines). Optionally, 
you may have an additional 16 trace signals which monitor external 
input lines. The analyzer collects data at each pulse of a clock signal, 
and saves the data (a trace state) if it meets a "storage qualification" 
condition. 

Note Emulators which have the optional external analyzer will display the 

Internal/External options after the commands in the following 
examples. Select the Internal option to execute the examples. 



Resetting the 
Analysis 
Specification 



To be sure that the analyzer is in its default or power-up state, select: 



Specifying a Simple 
Trigger 



Analysis, Trace, Reset 

Suppose you wish to trace the states of the sample program which 
follow the execution of Cmd_A routine. To do this, you must modify 
the default analysis specification by selecting: 

Analysis, Trace, Modify 
The emulation analysis specification is shown. Use the right arrow key 
to move the cursor to the "Trigger on" field. Type "a" and press Enter. 

You'll enter the pattern expression menu. Press the up arrow key until 
the addr field directly opposite the pattern a = is highlighted. Type in 
the local symbol Cmd_A or address C02D hex. 

Move the cursor to the stat field of pattern a. Use the <TAB> key to 
select exec in the field. 

The resulting analysis specification is shown in Figure 2-7 and 2-8. To 
save the new specification, use the End Enter to exit out of the field in 
the lower right corner. You'll return to the trace specification. Press 
End to move to the trigger spec field. Press Enter to exit the trace 
specification. 



2-28 Getting Started 



[] Uhile storing 
Trigger on 



Internal State Trace Specification 
tiiies 



§ Store 



any state 



Branches JI^B Count UlildJ Prestore JJj Trigger position 

IUUM of 512 

<-U-> :lnterfield MoueMent Ctrl <~> : Field editing TAB : Scroll choices 



STATUS: M377BB — Running user progran 



Ei-iulation trace halted 



TAB selects a pattern or press ENTER to Modify this field and the pattern ualues 



Figure 2-7. Modifying the Trace Specification 



Internal State Trace Specification 
Set 1 



Range <r> Label 
Pat 



I 



-addr- 



I 



CMd A 



Set Z 



thru 
— data- 



stat- 



E 
f 

3 
h 
arM 

Expression 

Expressions haue the forM: <setl> and/or <setZ>. Uhere setl consists of <a, 
b,c,d,r, !r> and setZ consists of <e, f , g, h, arn>. Patterns uithin a set can be 
Joined uith |(or) or ~Cnor>, but not both. Exanple: !r ~ a or e ! f ! g ! h 
Pattern Expression 



STATUS: M377BB — Running user progran 



EMulation trace halted 



TAB selects a sinple pattern or enter an expression or Moue up to edit patterns. 



Figure 2-8. Modifying the Pattern Specification 
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Starting the Trace 



To start the trace, select: 



Analysis, Begin 
A message on the status line will show you that the trace is running. 
You do not expect the trigger to be found because no commands have 
been entered. Modify the command input byte to "A" by selecting: 

Memory, Modify, Bytes 
Enter "Cmd_Input=41". The status line now shows that the trace is 
complete. 

Displaying the Trace To display the trace, select: 

Analysis, Display 
You are now given two fields in which to specify the states to display. 
Use the right arrow key to move the cursor to the "Ending state to 
display" field. Type "60" into the ending state field, press Enter, and 
use <CTRL>z to zoom the trace window. 



Note 




If you choose to dump a complete trace into the trace buffer, it will 
take a few minutes to display the trace. 



Use the Home key to get to the top of the trace. The resulting trace is 
similar to the trace shown in the following display. 
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Line 


addr, H 
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Msgs 


4854H 


data read 


mx 18.88 


uS 
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uS 
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uS 


STATUS: 1137788— Running user prograti 


EMulation trace coMplete 


Uindou SysteM Register* Processor Breakpoints Menory Config 



Begin Halt CMB For Mat Trace Display 



Line 0 in the trace list above shows the state which triggered the 
analyzer. The trigger state is always on line 0. To list the next lines of 
the trace, press the PgDn or Next key. 





16 
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data 


read 
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18 
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23 
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24 
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25 


00cl08 
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26 
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27 
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Begin Halt CMB For Mat Trace Display 
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The resulting display shows the MVN instruction moves the "THIS IS 
MESSAGE A" message to the destination locations. 



Using the Storage 
Qualifier 



You can use storage qualifier to trace only specific conditions. 
Suppose that you would like to trace only states which write the 
messages to the Msg_Dest area. To accomplish this, select the 
following command, and modify the analysis specification as shown in 
the following displays. 

Analysis, Trace, Modify 
Only write cycles to address Msg_Dest through Msg_Dest+20h will 
be stored in the trace buffer. 



Q Uhile storing 
Trigger on 



@ Store 



Branches 



Internal State Trace Specification 
titles 




Count 



Prestore Qgjj Trigge r position 

i-\t-nm of 512 
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EMulation trace conplete 



Use the TAB and Shift-TAB keys to select a trigger position or enter a nuMber. 
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Internal State Trace Specification 
Set 1 



Range <r) Label 
Pat 

a 

b 

c 

d 



-addr 



Msg_Dest+28 
tat 




Expression 



Expressions haue the Forn: <setl> and/or <setZ>. Uhere setl consists of <a, 
b,c,d, r, !r> and setZ consists of <e, f, g, h, arn>. Patterns uithi n a set can be 
joined uith !<or) or ~(nor), but not both. Example: !r~aore|f!g!h 
Pattern Expression: ^^^^^^^^^^^^ ^ B4BSI E ^*^E S ^?1 l &T t* ^ g *fitfTnTr*^ i ^^ 



STATUS: M377BB — Running user progran 



EMulation trace conplete 



|TflB selects a siMple pattern or enter an expression or Moue up to edit patterns? 



Start the trace, and modify the command input byte so that the program 
write a message to the destination area: 

Analysis, Begin 
Memory, Modify, Bytes 
Enter "Cmd_Input=41". 

Now display trace listing: 

Analysis, Display 
Type "60" into the "Ending state to display" field, and press Enter and 
Home. The resulting display shows the Clear_Output routine clears 
the destination area. 
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Analysis, 





addr, H 


M37700 MneMonicH 




count , R 
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MX 
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11 


00010c 


XX00H 


data 


urite 


MX 


56.00 


uS 


12 


00010d 


00xxH 


data 


urite 


MX 


56.00 


uS 
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STATUS: 
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Begin Halt CMB For Mat Trace Display 



You may notice the status line shows that the trace is still running. 
You need to halt the trace to change the analysis specification. To halt 
the trace: 

Analysis, Halt 

7700 Series Analysis Status Qualifiers 

The status qualifier "write" was used in the above example. The 
following analysis qualifiers may also be used with the 7700 Series 
emulator. 



Oualif ier 


Status bits (40 . . 47) 


Description 


backgrnd 


xlxx 


xxxx 
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byte 


xxlx 


lxlx 


Byte access 


cpu 


xxll 


xxxx 
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data 


xxlx 


lOxx 


Data access 


dma 


xxlO 
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exec 
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hold 
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xxxx 


HOLD cycle 
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word 


xxlx 
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Word cycle 


write 


xxlx 


lxxO 


Write cycle 
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Restriction of the 
Analyzer 



The following section describes the restrictions of the analyzer of 7700 
Series emulator. 



Trace of Internal RAM 

The analyzer cannot trace data which is read from internal RAM or 
SFR. Such data always appears FF hex in the trace listing. This is 
because the emulator uses the internal RAM and SFR of the emulation 
processor to perform emulation. Data read from internal RAM or SFR 
does not appear on the data bus. 

As an example, trace the accesses to the Cmdjnput area. To set up 
the analysis specifications, select: 

Analysis, Trace, Reset 
Analysis, Trace, Modify 
Modify the analysis specifications as shown in the following displays. 
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Trigger on 



g Store 
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TAB selects a pattern or press ENTER to Modify this field and the pattern ualues 
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Internal State Trace Specification 
Set 1 



Range <r) Label 
Pat 

a 

b 

c 

d 



-addr 




Expression 



Expressions haue the Forn: <setl> and/or <set2>. Uhere setl consists of <a, 
b,c,d, r, !r> and setZ consists of <e, f, g, h, arn>. Patterns uithi n a set can be 
joined uith !<or) or ~<nor), but not both. Exanple: ?r ~ a or e ! f j g j h 
Pattern Expression 



STATUS: M377BB — Running user progran 



Enulation trace halted 



|TflB selects a siMple pattern or enter an expression or Moue up to edit patterns? 



Start the trace, and display trace listing: 

Analysis, Begin 
Analysis, Display 
Press Enter three times. You will see the following display. 
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11 
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13 
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14 
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15 
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Begin Halt CMB For Mat Trace Display 



As you can see in line 1 1 of the trace listing, data read from internal 
RAM (which should be 00 hex) appears FF hex. 



Using a Command You can use a command file to perform many functions for you, 
p j |g without having to manually type each function. For example, you 

might want to create a command file that loads the sample program 
into memory, displays global symbols, and displays memory. To 
create such a command file: 

System, Log, Input, Enable 
Enter command file name "cmd_rds.cmd", and press Enter. This sets 
up a file to record all commands you execute. The commands will be 
logged to the file cmd_rds.cmd in the current directory. You can then 
use this file as a command file to execute these commands 
automatically. 

First, to load the sample program: 
Memory, Load 
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Enter file format, memory type, and absolute file name, and press 
Enter. 

To display global symbols: 

System, Symbols, Global, Display 
To display memory in mnemonic format: 

Memory, Display, Mnemonic 
Select "mOxO" as the MX value, enter address range "Init..Init+19", 
and press Enter. 

Now we're finished logging commands to the file. To disable logging: 

System, Log, Input, Disable 
The command file cmd_rds.cmd will no longer accept command input. 
The file looks like this: 



ml 

07700 
@Both 
@no 

@cmd_rds . hex 

ssgd 

mdm 

@m0x0 

@Init . . Init+19 



You can see a @ symbol in front of some lines in the file. These 
represents data values, as opposed to commands. 

Let's execute the command file "cmd_rds.cmd". 

System, Command_f ile 
Enter "cmd_rds.cmd", press Enter. Watch the command file 
commands execute. As you can see, the sequence of commands you 
entered is automatically executed. 
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Resetting the To reset the emulator, select: 

Emulator 



Processor, Reset, Hold 
The emulator is held in a reset state (suspended) until a "Processor 
Break", "Processor Go", or "Processor Step" command is entered. A 
CMB execute signal will also cause the emulator to run if reset. 

You can also specify that the emulator begin executing in the monitor 
after reset instead of remaining in the suspended state. To do this, 
select: 

Processor, Reset, Monitor 



Exiting the PC There are two different ways to exit the PC Interface. You can exit the 

Interface ^ ^ nter ^ ace me "locked" option which specifies that the current 

*" configuration will be present next time you start up the PC Interface. 

You can select this option as follows. 

System, Exit, Locked 
Symbols are lost when you use the "System Exit Locked" command; 
however, you can reload them (after you reenter the PC Interface) with 
the "System Symbols Global Load" command. 

The other way to exit the PC Interface is with the "unlocked" option 
which specifies that the default configuration will be present the next 
time you start up the PC Interface. You can select this option with the 
following command. 

System, Exit, Unlocked 
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Notes 
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3 



"In-Circuit" Emulation 



When you are ready to use the 7700 Series emulator in conjunction 
with actual target system hardware, there are some special 
considerations you should keep in mind. 

■ Installing the emulator probe. 

■ Properly configure the emulator. 

We will cover the first topic in this chapter. For complete details on 
in-circuit emulation configuration, refer to the "Configuring the 
Emulator" chapter. 
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Installing the 
Target System 
Probe 



Caution H damage to the emulator circuitry may result 

" IF THESE PRECAUTIONS ARE NOT OBSERVED. The 

following precautions should be taken while using the 7700 Series 
emulator. 



Power Down Target System. Turn off power to the user target 
system and to the 7700 Series emulator before inserting the user plug to 
avoid circuit damage resulting from voltage transients or mis-insertion 
of the user plug. 

Verify User Plug Orientation. Make certain that Pin 1 of the target 
system microprocessor socket and Pin 1 of the user plug are properly 
aligned before inserting the user plug in the socket. Failure to do so 
may result in damage to the emulator circuitry. 

Protect Against Static Discharge. The 7700 Series emulator contains 
devices which are susceptible to damage by static discharge. 
Therefore, operators should take precautionary measures before 
handling the user plug to avoid emulator damage. 



Note 



4 



When you use the emulator in-circuit, turn ON the target system first, 
then turn ON the emulator. Likewise, turn OFF the target system first, 
then turn OFF the emulator. 



3-2 In-Circuit Emulation 



Note Ha Your target system must have a clock generation circuit. The 

™ HP 64146-61001 and HP 64146-61002 emulation pods cannot generate 
clock signal using a ceramic (or quartz crystal) resonator. 



Installing the Target 
System Probe 



1. Set up the switches inside the emulation pod. Refer to the 
manual provided with your emulation pod. 

2. Remove the 7700 Series microprocessor from the target 
system socket. Note the location of pin 1 on the processor and 
on the target system socket. 

3. Store the microprocessor in a protected environment (such as 
antistatic foam). 

4. Install the target system probe into the target system 
microprocessor socket. 

5. Turn on your target system, and then, turn on the emulator. 




Figure 3-1 . Installing the Probe to LCC80 Socket 
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When your target system uses 64 pin shrink DIP socket, use the 
adaptor as hown in Figure 3-2. 




Figure 3-2. Installing the Probe to SDIP64 Socket 
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Configuring the Emulator 



Introduction The HP 64146A/B 7700 Series emulator is designed to help you in all 

stages of target system development. For instance, you can run the 
emulator out-of-circuit when developing and debugging your target 
system software and in-circuit when integrating your target system 
software with hardware. You can use the emulator's internal clock or 
your target system clock. Emulation memory can be used along with 
your target system memory, and it can be mapped as RAM or ROM. 
And, there are many more options available. 

The emulator is a flexible instrument and may be configured to suit 
your needs at any stage of the development process. This chapter 
describes the options available when configuring your emulator. 

This chapter will: 

■ Show you how to access the emulator configuration options. 

■ Describe the emulator configuration options. 

■ Show you how to save a particular emulator configuration, 
and load it again at a later time. 
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Accessing the 
Emulator 
Configuration 
Options 



There are two configuration options for the 7700 Series emulator. You 
can select either: 



Config, General 
When you position the cursor to a configuration item, a brief 
description of the item appears at the bottom of the display. 



Note Ma It is possible to use the System Terminal window to modify the 

™ emulator configuration. However, if you do this, some PC Interface 
features may no longer work properly. We recommend that you only 
modify the emulator configuration by using the options presented in 
the PC Interface. 



Internal clock? 
Software breakpoints? 
High speed access Mode? 
Trace HOLD tags? 
Processor type 
MeMory data access uidth -> 
16-bit address display -> 
Monitor type -> 



General EMulation Configuration 

38H Real-tiMe Mode? [^1 Breaks on ROM urites? 
3JJ] CMB interaction? [^1 Target interrupts? 
fl Insert auto RDV? [^1 Uatchdog tiMer? 
fl Trace refresh? [^] Trace DMA cycles? 
> QQsj^iQ Processor node -> 



single 



Reset stack pointer -> 



abso lute 



background 



«-tl-> : Interf ield Mouetient Ctrl «--» :Field editing TAB :Scroll choices 



STATUS: M377B8— EMulation reset 



EMulation trace halted 



If enabled, the eMulator uses the internal clock in enulation pod. Otherwise, 
the clock input froM the target systeM clocks the eMulator. 



Figure 4-1 . General Configuration Display 
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Internal Clock? 



This configuration question allows you to select the emulator's clock 
source; you can choose either the internal clock oscillator or the target 
system clock. 



yes Selects the internal clock oscillator as the emulator 

clock source. The internal clock is provided from 
the emulation pod. In the case of HP 64146-61001 
or HP 64146-61002 emulation pod, the clock speed 
is 1 MHz. When you use an emulation pod with 
clock faster than 16 MHz, you need to select the 
high speed access mode to run the emulator with no 
wait state. If the high speed access mode is not 
selected, the emulator requires one wait state. 

no Selects the clock input from the target system. You 

must use a clock input conforming to the 
specifications for the 7700 Series microprocessor. 
The HP 64146A/B emulator runs with no wait state 
with target system clock up to 16 MHz. When 
clock is faster than 16 MHz, you need to select the 
high speed access mode to run the emulator with no 
wait state. If the high speed access mode is not 
selected, the emulator requires one wait state. 



Note nel You can insert a wait state with one of the following method. 

■ Providing the /RDY from the target system. 

■ Configuring the emulator to generate the /RDY by answering 
"y" to the "Insert auto RDY?" question. 



Note 




When the external clock is selected, your target system must have a 



clock generation circuit. The HP 64146-61001 and HP 64146-61002 
emulation pods cannot generate clock using a ceramic (or quartz 
crystal) resonator. 
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Real-Time Mode? 



The "restrict to real-time" question lets you configure the emulator so 
that commands which cause the emulator to break to monitor and 
return to the user program are refused. 



no All commands, regardless of whether or not they 

require a break to the emulation monitor, are 
accepted by the emulator. 

yes When runs are restricted to real-time and the 

emulator is running the user program, all 
commands that cause a break (except "Processor 
Reset", "Processor Break", "Processor Go", and 
"Processor Step") are refused. For example, the 
following commands are not allowed when runs are 
restricted to real-time: 



■ Display/modify registers. 

■ Display/modify target system memory. 

■ Display/modify internal RAM or SFR. 

■ Load/store target system memory. 



Caution Hi If y° ur target system circuitry is dependent on constant execution of 

™ program code, you should restrict the emulator to real-time runs. This 
will help insure that target system damage does not occur. However, 
remember that you can still execute the "Processor Reset", "Processor 
Break", and "Processor Step" commands; you should use caution in 
executing these commands. 
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Breaks on ROM 
Writes? 



This question allows you to specify that the emulator break to the 
monitor upon attempts to write to memory space mapped as ROM. 
The emulator will prevent the processor from actually writing to 
memory mapped as emulation ROM; however, they cannot prevent 
writes to target system RAM locations which are mapped as ROM, 
even though the write to ROM break is enabled. 



no 



The emulator will not break to the monitor upon a 
write to ROM. The emulator will not modify the 
memory location if it is in emulation ROM. 



yes Causes the emulator to break into the emulation 

monitor whenever the user program attempts to 
write to a memory region mapped as ROM. 



Software This question allows you to enable or disable the software breakpoints 

Bl'Paknoint^'? feature. The 7700 Series emulator uses B RK instruction as software 

" " breakpoint. 



no The software breakpoints feature is disabled. This 

is specified by the default emulator configuration, 
so you must change this configuration item before 
you can use software breakpoints. 



yes Allows you to use the software breakpoints feature. 

When you set a software breakpoint, a BRK 
instruction will be placed at the address specified. 
When BRK instruction is executed, program 
execution will break into the monitor. 

When you define (add) a breakpoint, software breakpoints are 
automatically enabled. 
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CM B lnt6r3CtiOn? Coordinated measurements are measurements synchronously made in 

multiple emulators or analyzers. Coordinated measurements can be 
made between HP 64700 Series emulators which communicate over 
the Coordinated Measurement Bus (CMB). 

Multiple emulator start/stop is one type of coordinated measurement. 
The CMB signals READY and /EXECUTE are used to perform 
multiple emulator start/stop. 

This configuration item allows you to enable/disable interaction over 
the READY and /EXECUTE signals. (The third CMB signal, 
TRIGGER, is unaffected by this configuration item.) 

no The emulator ignores the /EXECUTE and READY 

lines, and the READY line is not driven. 

yes Multiple emulator start/stop is enabled. If the 

Processor, CMB, Go, . . . 
command is entered, the emulator will start 
executing code when a pulse on the /EXECUTE 
line is received. The READY line is driven false 
while the emulator is running in the monitor; it goes 
true whenever execution switches to the user 
program. 



Note 




CMB interaction will also be enabled when the 



Processor, CMB, Execute 
command is entered. 
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Target interrupts? 



This configuration allows you to specify whether or not the emulator 
responds to interrupt signals from the target system. 



yes The emulator will respond to interrupt signals from 

the target system. 

no The emulator will not respond to interrupt signals 

from the target system. 

If you are using the background monitor, the emulator does not accept 
any interrupt during background execution. Edge sensed interrupts are 
latched last one during in background, and such interrupts will occur 
when context is changed to foreground. Level sensed interrupts are 
ignored during in background operation. 

Note You may need to set up switches inside the emulation pod to accept 

interrupts from the target system. Refer to the manual provided with 
your emulation pod. 



HiCjh Speed When clock speed is faster than 16 MHz, the emulator can run with no 

aCCeSS mode? wait state by selecting the "highspeed access mode." If you don't 

. select the high speed access mode, the emulator requires one wait state. 

yes Enables the high speed access mode of the 

emulator. In the high speed access mode: 

■ The emulator can run with no wait state up to 25 MHz. 

■ you can map the emulation memory only to the 
following address ranges. 
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Memory 


Monitor 


Available location 


128K 


Background 


000000H- 


■01F7FFH 


128K 


Foreground 


000000H- 


■01FFFFH 


512K 


Background 


000000H- 


■07F7FFH 


512K 


Foreground 


000000H- 


■07FFFFH 


1M 


Background 


000000H- 


■0FF7FFH 


1M 


Foreground 


000000H- 


■OFFFFFH 


2M 


Background 


000000H- 


1FF7FFH 


2M 


Foreground 


000000H- 


1FFFFFH 



no Select the normal mode. In the normal mode: 

The emulator can run with no wait state up to 16 MHz. 
The emulator requires one wait state when clock is 
faster than 16 MHz. 

You can define up to 16 different map terms which 
can be placed wherever you like. 



Note You can insert a wait state with one of the following method. 

■ Providing the /RDY from the target system. 

■ Configuring the emulator to generate the /RDY by answering 
"y" to the "Insert auto RDY?" question. 



Note Changing this configuration will reset the memory map, 
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InSGTt aUtO RDY? This configuration allows you to select whether or not the emulator 

introduces a wait state. 



no Disables RDY signal generation by the emulator. 

When clock is equal or slower than 16 MHz, 
always select this answer. 

yes Enables RDY signal generation by the emulator. 

When you enables this feature, the emulator inserts 
a wait state to all memory access. 



Watchdog timSr ? This configuration allows you to enable/disable the watchdog timer 

interrupt. 

no Disable the watchdog timer interrupt. This may 

useful in early stage of your program development. 

yes Enables the watchdog timer interrupt. 



TraC6 HOLD tagS? This configuration allows you to select whether or not the emulator 

traces HOLD/HLDA cycles. 

no Disables tracing HOLD/HLDA cycles. 

yes Enables tracing HOLD/HLDA cycles. 

HOLD/HLDA cycles will appear as one analysis 
trace line. 
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Trace refresh? This configuration allows you to select whether or not the emulator 

traces refresh cycles by 7720 microprocessor. 



no 



yes 



Disables tracing refresh cycles by 7720 
microprocessor. 

Enables tracing refresh cycles by 7720 
microprocessor. 



Trace DMA 
cycles? 



This configuration allows you to select whether or not the emulator 
traces DMA cycles by 7720 microprocessor. 



no 



yes 



Disables tracing DMA cycles by 7720 
microprocessor. 

Enables tracing refresh cycles by 7720 
microprocessor. DMA cycles will appear as one 
analysis trace line. 



Processor type 



This configuration allows you to select the processor you are going to 
emulate. This item sets up the internal memory address, reset value for 
the stack pointer. 

Select appropriate <chip name> listed in Table 4-1. 

When your processor is not listed in Table 4-1, you need to set up the 
following configuration items from the System Terminal Window: 

■ cf irom 

■ cf iram 

■ cf isfr 

■ cf ipmr 
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<chip_name> 


Processor 


<chip_name> 




Processor 


7 7 D (1M9 


l v lo / /UU11Z — XXXr r 

I M2AxxxFP | 
M37701M2-xxxSP 

M2AxxxSP I 


7704M2 


1 
1 
1 
1 

1 

1 
1 


M37704M2-xxxFP 

M9&YYYRP 

M37705M2-xxxSP 

M9 a vv v CP 
MZAXXXo Jr 


1 7 0 flMd 


— + | 

M4AxxxFP | 
M37701M4-xxxSP 

M4AxxxSP I 


7 7 0 4M^ 


-- + - 

1 
1 


M3 7 7 0 4M3BxxxFP 




7704M4 


— +- 


M37704M4BxxxFP 




7704S1 




M37704S1FP 
SIAFP 

l v i J / / U u O ± O r 

SIASP 


7700S 


— + | 

M37700SFP 
I SAFP 

no / / ui j jr 

SASP 


1 
1 

1 
1 

1 
1 

+ - 




7 7 1 OMd 


1 


11 J) 1 1 1 VJ114DAAAI XT 


7700S4 


— + 1 

M37700S4FP 
I S4AFP 
M37701S4SP 
S4ASP 

-4- 1 


1 

— + - 


7710S4 


1 


M37710S4BFP 




7720S1 


1 

1 


M37720S1FP 
SIAFP 


7702M2 


| M37702M2-xxxFP | 
| M2AxxxFP | 

1 M9RvvvFP 1 

M37703M2-xxxSP I 
I M2AxxxSP I 
I M2BxxxSP I 




1 


7730S2 


-(_. 

1 

1 
1 
1 

1 

— + - 


M37730S2FP 
S2AFP 

S2ASP 




7 7 3 2 S 4 


1 


M'577'59 Q Zl TP 

S4AFP 


7702M4 


— + | 

M37702M4-xxxFP | 
M4AxxxFP | 

M37703M4-xxxSP 
I M4AxxxSP I 
I M4BxxxSP I 


1 

1 

— + - 




7 7 p n c 


i 
1 

— + - 


M37780STJ 
S TFP 




7781M4 


1 


M37781M4TxxxJ 
M4TxxxFP 


7702M6 


— + | 

M37702M6BxxxFP | 
M6LxxxFP | 
1 1 




1 

— +- 


7781E4 


1 
1 


M37781E4TxxxJ 
E 4 TxxxFP 


7702S1 


M37702S1FP 
SIAFP 
SIBFP 

M37703S1SP 
SIASP 
SIBSP 




i 

— + - 


7795S 


1 
1 

— + - 


M37795SJ 
STJ 




7796E4 


1 


M37796E4-xxxJ 
E4TxxxJ 
E4TxxxFP 


7702S4 


— + | 

M37702S4FP 
I S4AFP 
I S4BFP 

M37703S4SP 
1 S4ASP 
S4BSP 




1 

— + - 









Table 4-1 . <chip_name> for Emulator Configuration 



You can get help messages for these commands by typing the 
following command in the System Terminal Window: 
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R> ? cf irom 
R> ? cf iram 
R> ? cf isfr 
R> ? cf ipmr 



Processor Mode 



This configuration defines operation mode in which the emulator 
works. 



single The emulator will operate in single-chip mode. 

expand_8bit The emulator will operate in memory expansion 
mode with 8 bit data width. 

expand_16bit The emulator will operate in memory expansion 
mode with 16 bit data width. 

proc_8bit The emulator will operate in microprocessor mode 

with 8 bit data width. 

proc_16bit The emulator will operate in microprocessor mode 

with 16 bit data width. 



Note Sp You may need to set up a switch inside the emulation pod in addition 

to this configuration. Refer to the manual provided with your 
emulation pod. 



Memory d3t3 This question allows you to specify the types of cycles that the 

3CC6SS Width emulation monitor use when accessing target system memory. When 

an emulation command requests the monitor to read or write target 
system memory locations, the monitor will either use byte or word 
instructions to accomplish the read/write. 
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bytes 



Specifies that the emulator will access target system 
memory by byte accesses. 



words 



Specifies that the emulator will access target system 
memory by word accesses. 



Reset stack 
pointer 



This question allows you to specify the value to which the stack pointer 
(SP) will be set on entrance to the emulation monitor initiated RESET 
state (the "Emulation reset" status). 

The address specified in response to this question must be a 16-bit 
address. 

This configuration is automatically set up by the "Processor type ?" 
question. Reset value for Stack Pointer is set to the end of internal 
RAM. When the processor you select has no internal RAM, it is set to 
FFF hex. 

This address should be defined in RAM area (internal RAM, target 
RAM or emulation RAM). When the emulator breaks to the monitor, 
the background monitor uses 5 bytes of stack area. 



Caution 



Without a stack pointer, the emulator is unable to make the transition to 
run state, step, or perform many other emulation functions. 



16-bit address 
display 



This configuration allows you to enable/disable symbol display in 16 
bit addresses in mnemonic field. 
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absolute 



16 bit addresses are displayed in absolute value. 
Symbols are displayed only in 24 bit addresses of 
mnemonic field. 



symbol Symbols are displayed both in 16 and 24 bit 

addresses of mnemonic filed. You need to answer 
the following question. 

DT value for symbols 

Since symbols have 24 bit value, you need to specify the value of the 
upper 8 bit which will be used to display symbols in 16 bit addresses. 
The value specified in this question will be combined with the 16 bit 
value in mnemonic field, and symbols are displayed using the value. 



Monitor Type 

background 



foreground 



Specify monitor type as background monitor. 
When you select background monitor, 
configuration question of foreground monitor 
address have no effect to emulator' s operation. 

Specify monitor type as foreground monitor. 
When you select foreground monitor, you must 
specify correct foreground monitor start address 
with next configuration question (foreground 
monitor address). After you completed the 
configuration setting, you need to load foreground 
monitor program to the emulator with "Memory 
Load" feature. The foreground monitor program 
must already assembled and linked with appropriate 
monitor start address specification. 



To use the foreground monitor, follow below steps. 
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1. Decide which location the foreground monitor should be 
loaded. 

2. Assemble and link the foreground monitor program along with 
the location you decided. 

3. Configure the emulator as described in this chapter, (monitor 
type selection and monitor location). 

4. Load the foreground monitor program into memory by 
"Memory Load" feature. 



Foreground Monitor You must specify foreground monitor start address when you select 
AddreSS "f§" by above configuration question "Monitor type". This address 
specification must be same with the address specification when you 
assemble the foreground monitor program. 

The address must be specified in a 16-bit hexadecimal address, and 
must be located on a 2K byte boundary other than internal RAM and 
Special Function Register area. 



Note You cannot use the step command when you are using a foreground 

monitor. 
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StOfi I1CJ 3I1 The PC Interface lets you store a particular emulator configuration so 

Emulator l ^ at ^ ma ^ ^ e re ~l° ac * e d ^ ater - The following information is saved in 

4 *"* the emulator configuration. 

Configuration 



■ Emulator configuration items. 

■ Memory map. 

■ Break conditions. 
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Trigger configuration. 
Window specifications. 



To store the current emulator configuration, select: 

Config, Store 
Enter the name of file to which the emulator configuration will be 
saved. 



Loading an if you have previously stored an emulator configuration and wish to 

Emulator re-load it into the emulator, select: 

Configuration 

Config, Load 
Enter the configuration file name and press Enter. The emulator will 
be re-configured with the values specified in the configuration file. 
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Using the Emulator 



Introduction In the "Getting Started" chapter, you learned how to load code into the 

emulator, how to modify memory and view a register, and how to 
perform a simple analyzer measurement. In this chapter, we will 
discuss in more detail other features of the emulator. 

This chapter shows you how to: 

■ Make Coordinated Measurements. 

■ Store the contents of memory into absolute files. 
This chapter also discusses: 

■ Internal RAM and SFR of 7700 Series. 

■ Display or Modify the 7700 Series Special Function Registers. 
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Internal RAM and The emulator uses internal RAM of emulation processor to emulate 
g p p user program. When you direct the emulator to display the contents of 

internal RAM (or SFR) area, the emulator breaks to the monitor and 
the monitor program reads the contents of memory. Therefore, 
execution of user program is suspended to perform your direction. 
However, you can configure the emulator so that write cycles are 
performed to both internal RAM (or SFR) and emulation memory. In 
this case, you can see the data written to emulation memory without 
suspending program execution. 

To use this feature, you need to map these area to emulation RAM 
(eram). When you do this, you can display the contents of emulation 
memory without suspending user program execution. You still can 
display the contents of internal RAM by appending "@i" to address 
specification. 

For example, to see the content of address 100 hex in internal RAM, 

Memory, Display, Bytes 
You can enter either of the following as address specification. 

100 (This specifies emulation memory) 

100@i (This specifies internal RAM) 

When you don't map the internal RAM and SFR area to emulation 
RAM, you can access the internal RAM and SFR without appending 
"@i". 



Note B£j The contents of emulation memory is updated only when user program 

™ writes data to internal RAM or SFR. Therefore, the contents of 

emulation memory may be different from the actual value of internal 
RAM or SFR. Especially, you should pay a close attention when 
seeing flags of SFR. 



5-2 Using the Emulator 



Note When you modify memory, the emulator breaks to the monitor, and 

writes data to internal RAM or SFR. Therefore, user program is 
suspended when modifying internal RAM or SFR. 



Making 

Coordinated 

Measurements 



Coordinated measurements are measurements synchronously made in 
multiple emulators or analyzers. Coordinated measurements can be 
made between HP 64700 Series emulators which communicate over 
the Coordinated Measurement Bus (CMB). Coordinated 
measurements can also be made between an emulator and some other 
instrument connected to the BNC connector. 

This section will describe coordinated measurements made from the 
PC Interface which involve the emulator. These types of coordinated 
measurements are: 



Running the emulator on reception of the CMB /EXECUTE 
signal. 

Using the analyzer trigger to break emulator execution into 
the monitor. 



Note 




You must use the background emulation monitor to perform 
coordinated measurements. 
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Three signal lines on the CMB are active and serve the following 
functions when enabled: 

/TRIGGER Active low. The analyzer trigger line on the CMB 
and on the BNC serve the same logical purpose. 
They provide a means for the analyzer to drive its 
trigger signal out of the system or for external 
trigger signals to arm the analyzer or break the 
emulator into its monitor. 

READY Active high. This line is for synchronized, 

multi-emulator start and stop. When CMB run 
control interaction is enabled, all emulators are 
required to break to background upon reception of a 
false READY signal and will not return to 
foreground until this line is known to be in a true 
state. 

/EXECUTE Active low. This line serves as a global interrupt 
signal. Upon reception of an enabled /EXECUTE 
signal, each emulator is to interrupt whatever it is 
doing and execute a previously defined process, 
typically, run the emulator or start a trace 
measurement. 



Running the Before you can specify that the emulator run upon receipt of the 
Emulator at /EXECUTE signal, you must enable CMB interaction. To do this, 

/EXECUTE select 



Config, General 

Use the arrow keys to move the cursor to the "Enable CMB 
Interaction? [n]" question, and type "y". Use the Enter key to exit out 
of the lower right-hand field in the configuration display. 

To specify that the emulator begin executing a program upon reception 
of the /EXECUTE signal, select: 

Processor, CMB, Go 

At this point you may either select the current program counter, or you 
may select a specific address. 
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The command you enter is saved and is executed when the /EXECUTE 
signal becomes active. Also, you will see the message "ALERT: CMB 
execute; run started". 



Breaking on the 
Analyzer Trigger 



To cause emulator execution to break into the monitor when the 
analyzer trigger condition is found, you must modify the trigger 
configuration. To access the trigger configuration, select: 

Config, Trigger 

The trigger configuration display contains two diagrams, one for each 
of the internal TRIG1 and TRIG2 signals. 



BNC 



CMB 



Enulator 



Analyzer 



— Cross Trigger ConFiguration- 
TRIG1 



BNC 



CMB 



Eriulator 



Analyzer 



TRIGZ 



«-U-> :Interfield Mouenent Ctrl «--» : Field editing TAB : Scroll choices 



STATUS: M377B8— EMulation reset Enulation trace halted 

The internal analyzer May driue < ») , receive (« > or ignore the 

TRIG1 and TRIGZ signals. 



Figure 5-1 . Cross Trigger Condition 
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To use the internal TRIG1 signal to connect the analyzer trigger to the 
emulator break line, move the cursor to the highlighted "Analyzer" 
field in the TRIG1 portion of the display, and use the Tab key to select 

the " »" arrow which shows that the analyzer is driving TRIG1. 

Next, move the cursor to the highlighted "Emulator" field and use the 

Tab key to select the arrow pointing towards the emulator (« ); 

this specifies that emulator execution will break into the monitor when 
the TRIG1 signal is driven. The trigger configuration display is shown 
in figure 5-1. 



Note 
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If your emulator is configured with external analyzer, a "Timing" cross 
trigger option will be displayed. 



Storing Memory 
Contents to an 
Absolute File 



The "Getting Started" chapter shows you how to load absolute files 
into emulation or target system memory. You can also store emulation 
or target system memory to an absolute file with the following 
command. 



Memory, Store 



Note 
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The first character of the absolute file name must be a letter. You can 
name the absolute file with a total of 8 alphanumeric characters, and 
optionally, you can include an extension of up to 3 alphanumeric 
characters. 
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The "Memory Store" command writes over an existing file if it has the 
same name that is specified with the command. You may wish to 
verify beforehand that the specified filename does not already exist. 
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Notes 
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A 



File Format Readers 



Using the HP 64146 
Format Reader 



A HP 64146 Format "reader" is provided with the PC Interface. The 
HP 64146 Format Reader converts a MELPS 7700 Hex format file into 
two files that are usable with the HP 64146A/B emulator. This means 
you can use available language tools to create MELPS 7700 Hex 
format absolute files, then load those files into the emulator using the 
7700 Series PC Interface. 

The HP 64146 Format Reader can operate from within the PC Interface 
or as a separate process. Operation from within the PC Interface is 
available if there is enough memory on your personal computer to run 
the PC Interface and the HP 64146 Format Reader simultaneously. 



You can also run the reader as part of a "make file." 



What the Reader Using any MELPS 7700 Hex format absolute file and its symbol file 
AcCOITipl isheS ( nex fil e and -sym file), the HP 64146 Format Reader will produce two 
new files, an "absolute" file and an ASCII symbol file, that will be used 
by the 7700 Series PC Interface. 



The Absolute File 

During execution of the HP 64146 Format Reader, an absolute file 
(<file>.HPA) is created. This absolute file is a binary memory image 
which is optimized for efficient downloading into the emulator. 



The ASCII Symbol File 

The ASCII symbol file (<file>.HPS) produced by the HP 64146 
Format Reader contains global symbols, module names, local symbols, 
and, when using applicable development tools like a "C" compiler, 
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program line numbers. Local symbols evaluate to a fixed (static, not 
stack relative) address. 



Note 




You must use the required options for you specific language tools to 
generate symbol file (.sym file). 



mo du 1 e_n ame 1 
module_name2 



The symbol file contains symbol and address information in the 
following form: 



module_nameN 

global_symboll address 

global_symbol2 address 

global_symbolN address 

I module_name I local_symbol 1 address 

I module_name I local_symbol2 address 

I module_name I local_symbolN address 

I module_name I # 1234 address 



Each of the symbols is sorted alphabetically in the order: module 
names, global symbols, and local symbols. 

The local symbols are scoped. When accessing the variable named 
"count" in the source file named "main.c", you would enter 
"MAINxount". Notice that the module name of the source file 
"main.c" is "MAIN". See the following table. 



Module Name 


Variable Name 


You Enter: 


MAIN 


count 


MAINxount 


MAIN 


line number 23 


MAIN: line 23 



Line numbers will appear similar to a local symbol except that 
"local_symbolX" will be replaced by "#NNNNN" where NNNNN is a 
five digit decimal line number. Line numbers should appear in 
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ascending order in both the line number itself and its associated 
address. 



Note Ma When the line number symbol is displayed in the emulator, it appears 

™ as a bracketed number. Therefore, the symbol "modname:# 345" will 
be displayed as "modname:[345]" in mnemonic memory and trace list 
displays 



The space preceding module names is required. Although formatted 
for readability here, a single tab separates symbol and address. 



Location of the HP 
64146 Reader 
Program 



The HP 64146 Format Reader is located in the directory named 
\hp64700\bin by default, along with the PC Interface. This directory 
must be in the environment variable PATH for the HP 64146 Format 
Reader and PC Interface to operate properly. This is usually defined in 
"\autoexec.bat" file. 



Using the HP 641 46 The command name for the HP 64146 Format Reader is 
Format Reader from RD7700.exe. You can execute the HP 64146 Format Reader from the 
MS-DOS comman d line with the command: 



C:\HP64700\BIN\RD7700 [-q] <filename> 
<RETURN> 



where: 



[-q] specifies the "quiet" mode. This option suppresses 

the display of messages. 

<filename> is the name of the file containing the MELPS 7700 

Hex format absolute program. 

The command 

C: \HP64 700\BIN\RD7 7 00 TESTPROG . HEX 

will therefore create the files "TESTPROG.HPA" and 
"TESTPROG.HPS". 
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The 7700 Series PC Interface has a file format option under the 
"Memory, Load" command. After you select this option, the HP 
64146 Format Reader will operate on the file you specify. After this 
completes successfully, the 7700 Series PC Interface will accept the 
absolute and symbol files produced by the Reader. 

To use the Reader from the PC Interface, follow these steps: 

1. Start up the 7700 Series PC Interface. 

2. Select "Memory, Load". The memory load menu will appear. 

3. Specify the file format as "7700". This will appear as the 
default file format. 

4. Specify the name of a file in MELPS 7700 Hex format 
("TESTFILE.HEX" , for example, ). 



Note * The "<filename>.HPT" file is a temporary file used by the HP 64146 

■k£ Format Reader to process the symbols. 



Using a MELPS 7700 Hex format file and symbol file with the base 
name that you specify (TESTFILE, for example), the PC Interface 
performs the following: 

■ Checks to see if two files with the same base name and 
extensions .HPS and .HPA already exist (for example, 
TESTFILE.HPS and TESTFILE.HP A) . 

■ If TESTFILE.HPS and TESTFILE.HPA don' t exist, the 7700 
Series Format Reader produces them. The new absolute file, 
TESTFILE.HPA, is then loaded into the emulator. 

■ If TESTFILE.HPS and TESTFILE.HPA already exist but the 
create dates and times are earlier than the MELPS 7700 Hex 
format file creation date/time, the HP 64146 Format Reader 



Using the HP 64146 
Format Reader from 
the PC Interface 
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recreates them. The new absolute file, TESTFILE.HPA, is 
then loaded into the emulator. 



4 



If TESTFILE.HPS and TESTFILE.HPA already exist but the 
dates and times are later than the creation date/time for the 
MELPS 7700 Hex format file, the current absolute file, 
TESTFILE.HPA, is then loaded into the emulator. 



Note Date/time checking is only done within the PC Interface. When 

running the HP 64146 Format Reader at the MS-DOS command line 
prompt, the HP 64146 Format Reader will always update the absolute 
and symbol files. 



When the HP 64146 Format Reader operates on a file, a status message 
will be displayed indicating that it is reading a MELPS 7700 Hex 
format file. When the HP 64146 Format Reader completes its 
processing, another message will be displayed indicating the absolute 
file is being loaded. 



If the Reader Won't if your program is very large, then the PC Interface may run out of 

Run memory while attempting to create the database file used. If this 

condition occurs, you will need to exit the PC Interface and execute the 
program at the command prompt to create the files that are downloaded 
to the emulator. 



Including RD7700 in You may wish to incorporate the "RD7700" process as the last step in 
3 Make File y our " ma k e " file, or as a ste P in y our construction process, so as to 

eliminate the possibility of having to exit the PC Interface due to space 
limitations describe above. If the "-.HPA" and "-.HPS" files are not 
current, the process of loading an MELPS 7700 Hex format file will 
automatically create them. 
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Specifications of HP 64146 Format Reader 

The following are specifications of HP 64146 Format Reader. 

■ Label names and symbol names must be 15 and less 
characters in length. 

■ Up to 300 sections can be handled. 

■ If a label name contains "?",".", or they will be replaced 
with 



Note Ma The Format Reader uses both .hex file and .sym file. If .sym file is not 

™ found, the Format Reader will give you an error message. To generate 
.sym file, you need to specify -s option when you assemble and link 
your program. 



Using the 
IEEE-695 Reader 



An IEEE-695 MUFOM (Microprocessor Universal Format for Object 
Modules) "reader" comes with the PC Interface. The IEEE-695 reader 
converts an IEEE-695 format file into two files that are usable with the 
emulator. This means you can use available language tools to create 
IEEE-695 absolute files, then load those files into the emulator from 
the PC Interface. 

The IEEE-695 reader can operate from within the PC Interface or as a 
separate process. You may need to execute the reader as a separate 
process if there is not enough memory on your personal computer to 
run the PC Interface and the reader simultaneously. 

You can also run the reader as part of a "make file." 



What the Reader 
Accomplishes 



The IEEE-695 reader accepts as input an IEEE-695 format absolute file 
in the form "<file>.<ext>" and creates two new files that are used by 
the PC Interface: an "absolute" file, and an ASCII symbol file. 
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The Absolute File 



During execution of the IEEE-695 reader, an absolute file 
(<file>.HPA) is created. This absolute file is a binary memory image 
which is optimized for efficient downloading into the emulator. 

The ASCII Symbol File 

The ASCII symbol file (<file>.HPS) produced by the IEEE-695 reader 
contains global symbols, module names, local symbols, and, when 
using applicable development tools like a "C" compiler, program line 
numbers. Local symbols evaluate to a fixed (static, not stack relative) 
address. 



Note 




You must use the required options for your specific language tools to 
include symbolic ("debug") information in the IEEE-695 absolute file. 



The symbol file contains symbol and address information in the 
following form: 

module_namel 
module_name2 

module_nameN 
global_symbol 1 address 
global_symbol2 address 

global_symbolN address 

I module_name I local_symbol 1 address 
I module_name | local_symbol2 address 

|module_name I local_symbolN address 
I module_name I # 1234 address 

The space preceding module names is required. A single tab separates 
symbol and address. 

Each of the symbols is sorted alphabetically in the order: module 
names, global symbols, and local symbols. 

The local symbols are scoped. This means that to access a variable 
named "count" in a function named "foo" in a source file module 
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named "main.c," you would enter "main.c:foo.count." See the 
following table. 



Module Name 


Function Name 


Variable Name 


You Enter 


main.c 


foo 


count 


main.c:foo .count 


main.c 


bar 


count 


main.c:bar .count 



Line numbers will appear similar to a local symbol except that 
"local_symbolX" will be replaced by "#NNNNN" where NNNNN is a 
five digit decimal line number. Line numbers should appear in 
ascending order. 



Note Mi l When the line number symbol is displayed in the emulator, it appears 

as a bracketed number. Therefore, the symbol "modname: line 345" 
will be displayed as "modname: [345]" in mnemonic memory and trace 
list displays. 



Location of the 
IEEE-695 Reader 
Program 



The IEEE-695 reader is located in the directory named \hp64700\bin 
by default, along with the PC Interface. This directory must be in the 
environment variable PATH for the IEEE-695 reader and PC Interface 
to operate properly. This is usually defined in the "\autoexec.bat" file. 



Using the IEEE-695 
Reader from MS-DOS 



The command name for the IEEE-695 reader is RIEEE695.EXE. You 
can execute the IEEE-695 reader from the command line with the 
following command syntax: 

C:\HP64700\BIN\RIEEE695 [-u] [-q] <filename> 
<RETURN> 



[-u] 
[-q] 



Specifies that the first leading underscore of a 
symbol is not removed. 

Specifies the "quiet" mode. This option suppresses 
the display of messages. 
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<filename> Specifies the name of the file containing the 

IEEE-695 absolute program. 

The 7700 Series PC Interface has a file format option under the 
"Memory Load" command. After you select this option, the IEEE-695 
reader will operate on the file you specify. After the reader completes 
successfully, the PC Interface will load the absolute and symbol files 
produced by the Reader. 

To use the Reader from the PC Interface, follow these steps: 

1. Start the PC Interface. 

2. Select "Memory Load." The memory load menu will appear. 

3. Specify the file format as "IEEE-695." This will appear as 
the default file format. 

4. Specify the memory to be loaded (emulation, target, or both). 

5. Specify a file in IEEE-695 format ("TESTFILEABS," for 
example). The file extension can be something other than 
".ABS," but cannot be ".HPA," ".HPT," or ".HPS." 



Note 




The "<filename>.HPT" file is a temporary file used by the IEEE-695 
reader to process the symbols. 



Using the IEEE-695 file that you specify (TESTFILE.ABS, for 
example), the PC Interface performs the following: 

■ Checks to see if two files with the same base name and 
extensions .HPS and .HPA already exist (for example, 
TESTFILE.HPS and TESTFILE.HP A) . 



Using the IEEE-695 
Reader from the PC 
Interface 
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■ If TESTFILE.HPS and TESTFILE.HPA don' t exist, the 
IEEE-695 reader produces them. The new absolute file, 
TESTFILE.HPA, is then loaded into the emulator. 

■ If TESTFILE.HPS and TESTFILE.HPA already exist but the 
create dates and times are earlier than the IEEE-695 file 
creation date/time, the IEEE-695 reader re-creates them. The 
new absolute file, TESTFILE.HPA, is then loaded into the 
emulator. 

■ If TESTFILE.HPS and TESTFILE.HPA already exist but the 
dates and times are later than the creation date/time for the 
IEEE-695 file, the current absolute file, TESTFILE.HPA, is 
then loaded into the emulator. 



Note Ma Date/time checking is only done within the PC Interface. When you 

W run the IEEE-695 reader at the MS-DOS command line prompt, the 
reader will always update the absolute and symbol files. 



When the IEEE-695 reader operates on a file, a status message will be 
displayed indicating that it is reading an IEEE-695 file. When the 
reader completes its processing, another message will be displayed 
indicating the absolute file is being loaded. 



If the IEEE-695 if your program is very large, then the PC Interface may run out of 
Reader Won't Run memory while attempting to create the database file. If this occurs, exit 

the PC Interface and execute the reader program at the MS-DOS 
command prompt. 



Including RIEEE695 You may want to incorporate the "RIEEE695" process as the last step 
in a Make File m y° ur " ma k e " file, or as a step in your construction process, so as to 
eliminate the possibility of having to exit the PC Interface due to space 
limitations describe above. If the "-.HP A" and "-.HPS" files are not 
current, loading an IEEE-695 file will automatically create them. 
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